• 20 Posts
  • 46 Comments
Joined 10 months ago
cake
Cake day: August 23rd, 2024

help-circle
  • dotplotOPtoPixel Dungeon@lemmy.worldConfusion about github releases
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    27 days ago

    As I said in my post, I play on GNU/Linux, not android. But since you mention apkmirror.com, perhaps you can help me with a completely different problem.

    I currently use GrapheneOS without Google Play Services installed. This is mostly fine for me, since I am relatively privacy-conscious. But some companies nowadays are really pushing people to download their app, which they only distribute through the Google Play store or Apple App store. Given that I do not have access to either store, I have questions regarding these third party sources.

    First, where do third party sites like apkmirror get their apks? Do they download them from the google play store and upload them to apkmirror? How do they do that? When I used to have google play store, I never saw a way to see and save the .apk that I was downloading from the google play store in the file manager or whatever. It just said it downloaded and installed the app, without any clear way to extract a standalone apk from it.

    Second. how do I verify that apks from these third party stores are actually safe? These companies that are telling me to download from the google play store are not providing me a sha256sum of their apks or some other sort of digital signature. They are also not giving me a standalone apk from them even when I ask them for it. So how do I verify that the apks from places like apkmirror are legitimate and not viruses?

    Believe it or not, I did ask ChatGPT these questions before asking you. It did not help.

    Thank you.








  • The problem with doing that is that Accrescent is a security-focused app store with a GrapheneOS-like perspective on security. For that reason alone, they would probably want an official person making the app for Accrescent.

    Also, they say that F-Droid’s practice of compiling their own builds is poor security, since it delays when the app is updated on the store, which means that patching security vulnerabilities is delayed. From that perspective, an unofficial maintainer for an Accrescent app would have to be very prompt with updates to the Accrescent package in order to be accepted into the store. They also do not like that F-Droid signs their packages with their own key, because that adds F-Droid as another developer that the user has to trust, in addition to the official maintainer.

    So I do not think an unofficial maintainer would meet Accrescent’s security standards or GrapheneOS’s security standards. They would say that it is safer to either use their sandboxed Google Play or use Obtainium to download updates directly from Github instead. I personally use Obtainium. It is perfectly fine for me to do it that way. I just notice that the Accrescent app list is very small and needs more apps. And your game would probably be noticeable on there, due to the small app list. But it is fine; the GrapheneOS community is probably very small anyways.








  • dotplottoPixel Dungeon@lemmy.worldBug, or intended behavior?
    link
    fedilink
    English
    arrow-up
    2
    ·
    6 months ago

    After fighting goo, I prefer to drop all the potions and projectiles and wands before going down to floor 6. That way, as long as I have scrolls in my inventory, the scroll holder will spawn in the shop in floor 6. The scroll holder will protect scrolls from fire, so I make sure to buy it. By the time I get to Tengu, my scrolls are already protected and do not need to be dropped before the fight.

    It is also useful to avoid getting burned from Tengu in the first place. His smoke walls turn to fire on the squares they are on, then extinguish and move to the next set of squares. By paying attention to this, you can move through the smoke walls without getting burned.




  • I have uploaded the file at https://mega.nz/folder/mUIlSDQD#9RoCVdyLusYmiPsoCSlsxg.

    The sha256sum of the apk is ffb35bf9113bf36faab979f01361cb94f48141e2cb1d75216a79cbbc9ee26d97. I request that [Dev] Snail modify their post with the sha256sum that they get from the apk. Since the sha256sum should be identical, this would prove to readers that I have not modified the apk with malware. Regardless, since the user would not be compiling the apk from source code, users will have to trust that [Dev] Snail has not inserted malware into the apk.

    Please let me know if there are any problems with downloading the file.